                     (dissoc response :took))))
            ;; CMR-3154 acceptance criterium 1
            "Guests create"
-           ["guest" "create"] [acl7]
+           ["guest" "create"] [acl-provider-for-catalog-item-acl acl7]
 
            "Guest read"
-           ["guest" "read"] [acl1 acl3 acl4]
+           ["guest" "read"] [acl-provider-for-catalog-item-acl acl1 acl3 acl4]
 
            "Registered read"
            ["registered" "read"] [acl2 acl8]

        group1 (u/ingest-group token {:name "group1"} ["user1"])
        group2 (u/ingest-group token {:name "group2"} ["USER1" "user2"])
        group3 (u/ingest-group token {:name "group3"} nil)
        ;; No user should match this since all users are registered
        acl-guest (ingest-acl token (assoc (system-acl "ANY_ACL")
                                           :group_permissions

        acl10 (ingest-acl token (catalog-item-acl "All Granules"))

        system-acls [acl1 acl2 acl3 acl4]
        provider-acls [acl-provider-for-catalog-item-acl acl5]
        single-instance-acls [acl7 acl8]
        catalog-item-acls [acl9 acl10]
        all-acls (concat system-acls provider-acls single-instance-acls catalog-item-acls)]
    (u/wait-until-indexed)

    (testing "Find all ACLs"
      (let [response (ac/search-for-acls (u/conn-context) {:page_size 20})]
        (is (= (acls->search-response (count all-acls) all-acls)
               (dissoc response :took)))
        (testing "Expected Names"
